1. Information We Collect
| Category | Data Points |
|---|---|
| B2C Patient Inquiries | Name, contact (phone/email), nationality, area of medical interest, preferred hospital, intended visit period, additional notes |
| B2B Partner Inquiries | Hospital name, region, contact person name, position, contact information, inquiry details |
| Automatically Collected | IP address, cookies, access timestamps, service usage logs (Vercel Analytics) |
| Collected With Inquiry Submission | Referring source, landing page, campaign parameters (UTM tags and ad click IDs), browser language setting, time zone, device type, operating system, browser type, screen resolution, time spent on page, visit count |
2. How We Use Your Information
- Connecting overseas patients with Korean medical institutions
- Establishing B2B partnerships with hospitals and clinics
- Responding to inquiries and resolving complaints
- Statistical analysis for service improvement (in non-identifiable form)
- Analyzing inquiry sources and improving consultation quality (tailoring responses to your language and device environment)
3. Data Retention
- Patient consultation inquiries: retained for 3 years after consultation completion, then permanently deleted
- Partner inquiries: 1 year if no contract is signed; 5 years after contract termination if signed
- Where retention is required by applicable law, data will be retained for the period specified by such law
4. Sharing with Third Parties
We share your personal information with third parties only with your consent or as permitted by law (Articles 17 and 18 of the Korean Personal Information Protection Act).
| Recipient | Purpose / Data Shared |
|---|---|
| Affiliated medical institutions | Connecting patients with appropriate care / Name, contact, medical interests (with prior consent) |
5. Data Processors and Cross-Border Transfers
We use the following data processors to operate our service. Some processors are located outside Korea, resulting in cross-border transfer of your personal data (Article 28-8 of the Korean Personal Information Protection Act).
| Processor | Purpose | Country |
|---|---|---|
| Google LLC | Form data storage via Google Sheets / Apps Script | United States |
| Vercel Inc. | Website hosting and access analytics | United States |
Transfer timing: immediately upon submission · Method: HTTPS encrypted transmission · Retention: until processing agreement ends
6. Your Rights
You have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request restriction of processing
To exercise any of these rights, contact our Data Protection Officer using the information below. We will respond without undue delay.
7. Security Measures
- Administrative: Minimized access to authorized personnel, regular training
- Technical: Access control, HTTPS encryption, intrusion detection
- Physical: Restricted access to data storage facilities
8. Data Protection Officer
| Name | Jaemin Kim |
|---|---|
| Title | CEO |
| ceo@bekr.io |
9. Complaints and Remedies
If you have concerns about how we handle your personal data, you may contact:
- Korea Internet & Security Agency — Privacy Complaint Center (privacy.kisa.or.kr / 118)
- Personal Information Dispute Mediation Committee (kopico.go.kr / 1833-6972)
- Cyber Crime Investigation, Supreme Prosecutors' Office (spo.go.kr / 1301)
- National Police Cyber Bureau (ecrm.cyber.go.kr / 182)
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page at least 7 days before they take effect.
Effective date: April 29, 2026
Last revised: April 29, 2026